PatchSiren cyber security CVE debrief
CVE-2026-45612 rizinorg CVE debrief
The CVE-2026-45612 vulnerability affects the rz-libdemangle Rizin library, specifically the Rust demangler in src/rust/rust_v0.c. An out-of-bounds read can occur when the demangler structure is not yet initialized. This issue was fixed in commit 6bf56d3. The rz-libdemangle library is used for demangling symbols in Rizin and has a vulnerability in its Rust demangler. The vulnerability can lead to potential crashes or information disclosure. The issue has a CVSS score of 5.5 and is classified as MEDIUM severity.
- Vendor
- rizinorg
- Product
- rz-libdemangle
- CVSS
- MEDIUM 5.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-07-16
- Original CVE updated
- 2026-07-16
- Advisory published
- 2026-07-16
- Advisory updated
- 2026-07-16
Who should care
Developers and users of the rz-libdemangle Rizin library should be aware of this vulnerability and take necessary actions to update to the fixed version. The vulnerability can lead to potential crashes or information disclosure. The issue has a CVSS score of 5.5 and is classified as MEDIUM severity.
Technical summary
The rz-libdemangle library, used for demangling symbols in Rizin, has a vulnerability in its Rust demangler. Prior to commit 6bf56d3, an out-of-bounds read can occur when the demangler structure is not yet initialized. This issue has a CVSS score of 5.5 and is classified as MEDIUM severity. The vulnerability can lead to potential crashes or information disclosure. Developers and users of the rz-libdemangle Rizin library should be aware of this vulnerability and take necessary actions to update to the fixed version.
Defensive priority
Medium priority should be given to updating the rz-libdemangle library to the fixed version, as the vulnerability can lead to potential crashes or information disclosure.
Recommended defensive actions
- Update the rz-libdemangle library to the latest version containing commit 6bf56d3.
- Review and monitor the library's usage in your projects.
- Consider implementing additional security measures to prevent potential exploitation.
- Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
- Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
- Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
- Check relevant monitoring, detection, and logs for exposed assets that need extra review.
Evidence notes
The CVE record was published on 2026-07-16T17:16:56.687Z and last modified on 2026-07-16T19:16:45.433Z. The NVD entry is currently Deferred. The rz-libdemangle library, used for demangling symbols in Rizin, has a vulnerability in its Rust demangler. Prior to commit 6bf56d3, an out-of-bounds read can occur when the demangler structure is not yet initialized. This issue has a CVSS score of 5.5 and is classified as MEDIUM severity. Developers and users of the rz-libdemangle Rizin library should be aware of this vulnerability and take necessary actions to update to the fixed version.
Official resources
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-16T17:16:56.687Z and has not been modified since then. The NVD entry is currently Deferred.